Senior Network Infrastructure & Security Architect

About the role

Johns Hopkins Aramco Healthcare is looking for a senior professional to lead the design, governance and standardisation of its enterprise network and security architecture across mission‑critical healthcare environments. The role combines deep expertise in routing, switching, LAN/WAN, wireless and data‑centre networking with advanced security frameworks such as Zero Trust and SASE.

Key responsibilities

• Design and oversee complex enterprise network infrastructures including LAN, WAN, SD‑WAN, Wi‑Fi and data‑centre connectivity.
• Architect robust wireless networks that support real‑time, low‑latency clinical operations.
• Develop IP schema planning, zoning strategies and multi‑tier segmentation models.
• Implement and govern advanced security controls such as firewalls, VPNs, WAF, IDS/IPS, DLP and secure web/email gateways.
• Lead adoption of Zero Trust, SASE, IAM and next‑generation security strategies.
• Produce engineering design packages, high‑ and low‑level diagrams and traffic‑flow analysis.
• Define and maintain network and security standards, baselines and communication protocols.
• Lead vendor evaluations, proofs of concept and technical workshops while ensuring compliance with healthcare regulatory frameworks.

Required profile

• Minimum 10 + years of enterprise network architecture experience.
• Strong background in routing, switching, LAN/WAN and wireless networking.
• Proven experience with firewalls, VPNs, WAF, IDS/IPS, DLP and network segmentation.
• Familiarity with hybrid cloud connectivity, SASE, Zero Trust and IAM frameworks.
• Experience in highly regulated, mission‑critical environments, preferably healthcare.
• Bachelor’s degree in IT, Computer Science or related field (Master’s preferred).

Required skills

• Enterprise routing and switching.
• LAN/WAN and wireless networking, including SD‑WAN.
• Data‑centre networking.
• Firewalls, VPNs, Web Application Firewalls (WAF).
• Intrusion Detection/Prevention Systems (IDS/IPS).
• Data Loss Prevention (DLP) and secure web/email gateways.
• Zero Trust, Secure Access Service Edge (SASE) and Identity & Access Management (IAM).
• Hybrid cloud connectivity and IP schema design.
• Network segmentation and multi‑domain security models.
• Knowledge of NIST and ISO 27001 security frameworks.